TweetFollow Us on Twitter

Leopard's New Toolbox �

Volume Number: 23 (2007)
Issue Number: 12
Column Tag: Systems Administration

Leopard's New Toolbox

What's new for the system administrator

by By Philip Rinehart, Yale University

The toolbox

Every system administrator has a number of tools in their toolbox. Third parties provide some tools, some are home grown, and others are based on tool provided by the operating system or developer tools. While much has been made of the new gee-whiz features of Leopard, the system administrator has not been neglected! Let's start with one of my favorites, dtrace.

dtrace

In Leopard, a decision was made to include a tool developed by Sun Microsystems, dtrace. What is the tool? The description from Sun best says it, "DTrace is a comprehensive dynamic tracing framework for the Solaris Operating Environment. DTrace provides a powerful infrastructure to permit administrators, developers, and service personnel to concisely answer arbitrary questions about the behavior of the operating system and user programs." In Leopard, it has been tightly integrated with the kernel, and can track many different operations, including file systems operations, memory operations, as well as many others. They are all tracked with the use of "probes". What does this mean for the system administrator?

Dtrace allows any system administrator to track a problem of any piece software without having debugging code present. It is dynamic! There is one drawback though, one has to learn the D language, which is very similar to C. Ick, another programming language to learn. Well, not quite, fortunately a tool for using dtrace was included in Leopard, dtruss. Originally part of the dtrace toolkit written by Brendan Gregg, it has been ported over to OS X. Here's a really simple example:

dtruss ls

What does this command do? It prints a ton of information from the kernel, including file system operations, memory operations, as well as any other call that passes through the kernel. The format of the output is pretty dense however, so can an option help? You bet, add the -s for a stack backtrace. This prints information on the stack in a much more readable format, including information directly related to the call being made. A couple of other very useful options are:

-p to attach to a pid

-n to attach to the name of a process

-f to follow children of a launched process

In general, this tool could be used to track a whole host of information about processes, and problems that have previously been difficult to troubleshoot. I admit it, I'm a command line junkie, but what if there was a more fun way to do it? A new tool that sits on top of Dtrace has been introduced, Instruments. It is supposed to be "GarageBand" for developers. Sounds strange doesn't it? Let's take a quick look. Launch Instruments from the Developer Tools. Figure 1 is how the window appears:


Figure 1

Wow, cool! It's even easier to track a couple of pieces of information that traditionally have been hard to track as a sysadmin. For a quick hit, select File Activity. Figure 2 shows how the left side of the panel appears:

Note how some nice defaults have been added. All of these attributes might be pieces of information that are important when trying to track down how an application is misbehaving. Figure 3 is a quick example of what the output might look like:


Figure 2

Each individual piece of information can be examined, and it can be tracked over time. That's only the beginning! The complete library of information that can be tracked is quite large. CPU Activity, Network Activity, a huge number of things can be tracked, and not one bit of programming has to be learned. It really simplifies the tracking of problems and is really up to your imagination. No more using fs_usage to track problems, hoorah! One last thing: the information can be saved, and sent to the Developer or shared with other system administrators.


Figure 3

Packagemaker

Package construction has changed significantly in Leopard. It can now watch the file system and create "snapshots". Launch Packagemaker, select the Project menu, and then choose Add Snapshot Package. It will watch the file system and monitor all changes. Click the Start button, and the process starts. Click Stop and the process then stops. After that click Next to proceed to the screen where cruft can be eliminated. Figure 4 is an example of how it might appear:


Figure 4

Taking a look at this, it is easy to eliminate certain files right off the bat. Uncheck them if they are not to be included. Some are relatively easy, such as .DS_Store files, or files in /private/var. That's the first step! Next, Save the snapshot.


Figure 5

Figure 5 shows how the snapshot appears. From there, the new Packagemaker allows for all the permissions to be altered to whatever is desired. The snapshot of information can be customized, including look and feel. The package build process is also much more informative, as it now can highlight the problem found when building a package for distribution. The interface is highlighted, showing where the error should be fixed.

Even more has been added, an Automator-like interface has been added to pre and postinstall actions. They included loading kernel extensions, getting applications or a few other items. Requirements can even be specified so that an application can be installed only on a system that meets the requirements. Note that even snapshot packages can have these requirements applied.

These are two of the big tools that have been added to Leopard that will make a system administrator's life easier. Packagemaker can be used to repackage applications that are not in the Apple package format. Once installed, Instruments and dtruss can help the system administrator troubleshoot applications. These tools also aid the system administrator in providing feedback to the Developer of the application so it can be properly rewritten.

Now that you've read about the tools, start playing with them. I've already found them immensely useful, and made my life easier. See you at MacWorld!


Philip Rinehart is co-chair of the steering committee leading the Mac OS X Enterprise Project (macenterprise.org) and is the Lead Mac Analyst at Yale University. He has been using Macintosh Computers since the days of the Macintosh SE, and Mac OS X since its Developer Preview Release. Before coming to Yale, he worked as a Unix system administrator for a dot-com company. He can be reached at: philip.rinehart@yale.edu. The MacEnterprise project is a community of IT professionals sharing information and solutions to support Macs in an enterprise. We collaborate on the deployment, management, and integration of Mac OS X client and server computers into multi-platform computing environments.

 

Community Search:
MacTech Search:

Software Updates via MacUpdate

Latest Forum Discussions

See All

Six fantastic ways to spend National Vid...
As if anyone needed an excuse to play games today, I am about to give you one: it is National Video Games Day. A day for us to play games, like we no doubt do every day. Let’s not look a gift horse in the mouth. Instead, feast your eyes on this... | Read more »
Old School RuneScape players turn out in...
The sheer leap in technological advancements in our lifetime has been mind-blowing. We went from Commodore 64s to VR glasses in what feels like a heartbeat, but more importantly, the internet. It can be a dark mess, but it also brought hundreds of... | Read more »
Today's Best Mobile Game Discounts...
Every day, we pick out a curated list of the best mobile discounts on the App Store and post them here. This list won't be comprehensive, but it every game on it is recommended. Feel free to check out the coverage we did on them in the links below... | Read more »
Nintendo and The Pokémon Company's...
Unless you have been living under a rock, you know that Nintendo has been locked in an epic battle with Pocketpair, creator of the obvious Pokémon rip-off Palworld. Nintendo often resorts to legal retaliation at the drop of a hat, but it seems this... | Read more »
Apple exclusive mobile games don’t make...
If you are a gamer on phones, no doubt you have been as distressed as I am on one huge sticking point: exclusivity. For years, Xbox and PlayStation have done battle, and before this was the Sega Genesis and the Nintendo NES. On console, it makes... | Read more »
Regionally exclusive events make no sens...
Last week, over on our sister site AppSpy, I babbled excitedly about the Pokémon GO Safari Days event. You can get nine Eevees with an explorer hat per day. Or, can you? Specifically, you, reader. Do you have the time or funds to possibly fly for... | Read more »
As Jon Bellamy defends his choice to can...
Back in March, Jagex announced the appointment of a new CEO, Jon Bellamy. Mr Bellamy then decided to almost immediately paint a huge target on his back by cancelling the Runescapes Pride event. This led to widespread condemnation about his perceived... | Read more »
Marvel Contest of Champions adds two mor...
When I saw the latest two Marvel Contest of Champions characters, I scoffed. Mr Knight and Silver Samurai, thought I, they are running out of good choices. Then I realised no, I was being far too cynical. This is one of the things that games do best... | Read more »
Grass is green, and water is wet: Pokémo...
It must be a day that ends in Y, because Pokémon Trading Card Game Pocket has kicked off its Zoroark Drop Event. Here you can get a promo version of another card, and look forward to the next Wonder Pick Event and the next Mass Outbreak that will be... | Read more »
Enter the Gungeon review
It took me a minute to get around to reviewing this game for a couple of very good reasons. The first is that Enter the Gungeon's style of roguelike bullet-hell action is teetering on the edge of being straight-up malicious, which made getting... | Read more »

Price Scanner via MacPrices.net

Take $150 off every Apple 11-inch M3 iPad Air
Amazon is offering a $150 discount on 11-inch M3 WiFi iPad Airs right now. Shipping is free: – 11″ 128GB M3 WiFi iPad Air: $449, $150 off – 11″ 256GB M3 WiFi iPad Air: $549, $150 off – 11″ 512GB M3... Read more
Apple iPad minis back on sale for $100 off MS...
Amazon is offering $100 discounts (up to 20% off) on Apple’s newest 2024 WiFi iPad minis, each with free shipping. These are the lowest prices available for new minis among the Apple retailers we... Read more
Apple’s 16-inch M4 Max MacBook Pros are on sa...
Amazon has 16-inch M4 Max MacBook Pros (Silver and Black colors) on sale for up to $410 off Apple’s MSRP right now. Shipping is free. Be sure to select Amazon as the seller, rather than a third-party... Read more
Red Pocket Mobile is offering a $150 rebate o...
Red Pocket Mobile has new Apple iPhone 17’s on sale for $150 off MSRP when you switch and open up a new line of service. Red Pocket Mobile is a nationwide MVNO using all the major wireless carrier... Read more
Switch to Verizon, and get any iPhone 16 for...
With yesterday’s introduction of the new iPhone 17 models, Verizon responded by running “on us” promos across much of the iPhone 16 lineup: iPhone 16 and 16 Plus show as $0/mo for 36 months with bill... Read more
Here is a summary of the new features in Appl...
Apple’s September 2025 event introduced major updates across its most popular product lines, focusing on health, performance, and design breakthroughs. The AirPods Pro 3 now feature best-in-class... Read more
Apple’s Smartphone Lineup Could Use A Touch o...
COMMENTARY – Whatever happened to the old adage, “less is more”? Apple’s smartphone lineup. — which is due for its annual refresh either this month or next (possibly at an Apple Event on September 9... Read more
Take $50 off every 11th-generation A16 WiFi i...
Amazon has Apple’s 11th-generation A16 WiFi iPads in stock on sale for $50 off MSRP right now. Shipping is free: – 11″ 11th-generation 128GB WiFi iPads: $299 $50 off MSRP – 11″ 11th-generation 256GB... Read more
Sunday Sale: 14-inch M4 MacBook Pros for up t...
Don’t pay full price! Amazon has Apple’s 14-inch M4 MacBook Pros (Silver and Black colors) on sale for up to $220 off MSRP right now. Shipping is free. Be sure to select Amazon as the seller, rather... Read more
Mac mini with M4 Pro CPU back on sale for $12...
B&H Photo has Apple’s Mac mini with the M4 Pro CPU back on sale for $1259, $140 off MSRP. B&H offers free 1-2 day shipping to most US addresses: – Mac mini M4 Pro CPU (24GB/512GB): $1259, $... Read more

Jobs Board

All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.